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Hy antes*** fco S ive la aasvar to tie third Ration of mat Lieutenant 
■1 

' KT Ca3SLCEES 1,312 a Btatararat of >he er^teaaljtio succeacas of (mfiihi 
***** lS ' 5S to DO * fraa t&at boko points will remin obscure in 

aplt* of the Ssfinitiera and alienations given. She roots of -these 
ebee«i-it.i«s lis in part in r*y Inadequacy, bacaaaa there are nany details I 
never 2r«v ana *jot as nany that I have for^tcan: but thay lie also in th© 
fact that the cryptologlata of the varies countries work with very d i Targont 
COI5C:,?ts ' cnd vos * 88 egression of the concept osa occasion nacrous 

atswidasstacdlasa. Ehssre are certainly eo^ of sry forae* colleagues lo 
African custody. They alght eh**, Ulster*, arvJ i^ rciye tlp3Q ^ stateOimta. 

If I take the third question literally, tbat is to say, as if only purely 
(jryptamlytical results vera of interest, ay account sould leave gape; I have 
no illustrative natorlal vnatscsver and aneyerteg sucb a auoation vould be 
beyond ry r^tal capacity. If, hesever, I combine the ansver to this question 
«itb a description of the individual cryptographs syatens which still stick in 
W somry, I boilers I can giv« an account which cr« at least claia to be a 
co^rob£-c3ire survey. 

Out of portions of the rules of the amy and its staffs which collapsed in 
Hoveober 1913 the Cipher Section (Chi) of the Gerzan Ministry of War 
(BelchakrlafiagtotgtgrtuM) was founded in 1920. m eaother place S x ^ el _ 
ready reported on its organization and development devn to the collapse in May 
19l»5. Therefore, the description of tbe cryptanalytic results from 1938 on 
concerns only a snail part of the total results, but at the BaE * time brings 
;o!any supplemental details „ 



1. Lt. LfflJE, then assigned to Eq. ASA Europe, vao tbe Aaerican officer who 

euccsasee of CEW/Cbl and Fmm>s estiaat^ Sli^rSt^SSS.. 

2. Second report of this series, DF-187A. 



Bveryshere a where cryptanalytic work was dene, the principle was valid j 

1. First Look at the materiel carefully. 

2, Consider what sort o? a statistical count you vill sake. 

5. Choose the appropriate fcra for your count or have a new form printed. 

'v. Try to vain fron this count criteria fear the recognition of the 
underlying cryptographic systaa. 

5. Eo not give as uncritical, free rein to your fancy, 

6, Do nothlDg which la superfluous, end work systematically. 

Hew often these rules wore follcffaS in individual cases cannot he stated . 
Indeed, r.o absolute boundary can be Srara between a reecsnltioa by cryptanalyti< 
saess and one achieved intuitively, tfith systenatio rcrk ever;' solution is 
always obtained analytically., svsn if a plain French cede is involved. And 
entire unit verged systematically; there was co work by trial and error, each 
less by guessing,- every assertion had to he justified - eren doubts J 

3 C C rygtanalytic Sus ceaaea of CS> /OM by Country 
Susaia: From their first appearance to the susser of 1943 the cryptographic 
ays-baas "02" and their successors vers worked cn and solved. I thick the first 
system of this land was "oz~5". I as sure that and 02-7 were solved end 
later, I believe, C2-3 as well, if I rezsaber rightly, these were 4-dlglt 
ocdea with partial reenoipheraent by 2-digit substitution tables. 

After scae original copies were captured, solution bacon© rjuch simpler 
because now the entire vocabulary was team. Eelalngfora Bttcceasfully shared 
in the solution and ia acne cases finished acre Quickly than Chi, Work was 
also dec* on the HK7D syatea. However, I never saw any tangible resultB. My 
people (detailed to the Air Force) returned In the sunmer of 191*3 and I 
never l earned whether the Amy and Air Force achieved any results latsr. 

. word was "yes". But I never saw any positive results. If solu- 
tions of this code with its infinite additive reencipheraent were achieved, it 
was probably only when by error the Infinite additive sequence had been used 
several tia-es; otherwise, solution would have been iapossible. For when blocks 
of additive were captured, it vas clear that the blocks could not be used, to 
say nothing of the fact that they vere not allowed to be used except in cases 
of catastrophe when co other systeaa were available. 



fia & natter at principle no vcrJ: was dene on the debars "Pclpred", 
l ^arlt33lc3ol n l and 0-fchar diplomatic eyotaas because It was certain that the 
Infinite additive Eeeusnce wonlfl not he repeated, and bones co teals for 
aedaatloa could ba found with van the ocat saoasn technical means. Mcototot, 
It had -co be easuoed that the basic coda was of a nlssd-uait typo. 
p0 ^ ccg ' 5 -= C3 the iutrodi;ctiou cf additive seraecces as reenoipfcercen?. for 
the diplc^atic 4-dlglt cede, Poland had in the ccuroo of years repeatedly 
improved lis c-^tcsxpohic cyatana. The digit sagae-caea came to ba forty digits 
Ion?, later they vsre ra-jslarly a ratttiple of k plus i cr 2* plus 3. Z. g. L - 
5C . fc 4. 1 - 801. Her.cc the solution of er.ch additive sequences depended 
e^clnrjlvely ca the KEOiast of traffic. But chile originally an infinity addi- 
tion ra^ancs (as 2 ssea to rscoil) T-as valid for Ih days and was pretty ouro 
to ba used noro \.r:n enca - tbsro vera oryptcgsrapMc alerks who would c-eart 
aaing the additive at the sane point la stereotypy fashion - the iafiaite 
additive seouecce ras later replaced acre ffceqaently and was dlfferaot for 
aaot circuit, a. g., tfarocw - Berlin, tferaaw - tfaahingtOBj in fact, at tha end. 
that is shortly b afore the var brche cat, »ho infinite additive sequences on tha 
lltfe ?raraa» - Berlin were different fro* these for traffic Berlin - Warsaw. 
And the charges occurred 30 rapidly that even shea the code ma well solved the 
telegraas ccald no longer be read beccase there wold aot even bo two aoesages 
in the seise fee/. Of the acreages of the Oovercasat-la-Exlle and of the 
Resistance Movaaent which appeared later, the asjorlty were solved down to ttie 
Bdddla of March. The extensive differences vera derived ^hanically. A second 
systers of a fore couplex character I as no leaser able to describe exactly, 
'■ith sreet reservation I will soy that substitution tables were used for 

"hese irsra sseaicgly non-systematic but still ware interpreted 
as systematic .-according to certain lavs of the group theory. The basic system 
was probably a so-called 2-digit substitution. I assures it to be knc*m that 
the Poles had a first class contact with HITLER'S Headquarters where they 
obtained pertinent stratetio information In good season. The cover number of 
this conf idential agent was a 3 -digit number (k0^). In any case the chief men 
of C£tf and of the Geraan Government knew from the deciphenaent of Polish messages 
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MmaOm for e^osica of Peaaraaie <?a an eateaaibly former Poltaa area, 
aa* the resort on tes atee^iotesats that t!l3 So7i3t p.^.^ ^ 

aonateatly cauains tha Poles after tee Gercan front vaa pushed back. 

So tnostograw appeared after the spring of 1939. Up to that 
tite sot c single goterawat syaten fa*! toes sclni, Apparently the v-aslc syo-te 
r«a r. loiter eubatltution, ?te typa of raenciplarsent aae cerer learned. 
?araXlel paeeagea did cot occur la the encrypted text. During the va? cut re- 
,J3l - a l0clat,d ° 2;?ch ^totexta cf ur^ct^ origin bat ^itb the appropriate 
toy. So far as J recall these vera transpositions of a 8-digit substitution, 
3319 content dealt vita contacts of tsoae confidential agaats. 
2i£*i2£**« cryptcsropbio system of tha OOTansEaat-laJEzlia vara liie the 

paacctte. syateas. They were read currently, rite the natural intention 
aw-y tin* there «as a change cf cade or of reencishexraw*. rfae actual ayetea 
ima a 5- Letter cede and a 2-letter euhctltuticn. Bcearer lugealavia al^ya 
nad, a* artataSa of facilitating tee analysis of its official telagwast either 
the saw acce vac nothing but a e^teaafcia shifting of the old ore, a. g., by 
aalfting tha page aut&era, or shen a aer scoe actaally «aa used they continued 
to ace oubetitntlon tebl,r,- teich had been solve,; , 2 -,en trhen the rconcipherseot 
changed daily telegraas aare decrypted, prorided there vas enough traffic 
available. In any case the aaaaroua aariatioaa cf the extern did not afford any 

******** against analysis. Xugcstarta off era a typical exaapie of a 
cryptographic ayatea which reduced the ltait of ita natural security by falas 
use. If. at the beginning of tha kO'a, lUgcalaTia had once introduced an 
absolutely as* 5-digit cc^e together sitfa a eaa flatter substitution table and 
naa variations, teen aith tee rather scanty traffic not a single aaesego vould 
haTr " ""' , ' t wianta of tee reencipherrsnt rare complicated : 

they no longer replaced tec ed.jacent digits of a line by teo letters, but tvo 
digits one aboue the other, vhich vere no longar fro* successive cede groups. 
Haw, no longer; 
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but 

- 2 - 5 6 7 3 0 9 2 

? J * 5 7 3 0 1 6 0 

kalafieioa ........ 

with numerous variafeioaB in the formation ef pairs. Even though solution 

f « 111 ^ *7 ^^aticaea aide, the war* aas net easy due to the 
52112,1025 ° f of ttfk tbia type of reerciphanwrt 

301:3 500 tTO - l8tt,r »»• waded in order to reduce with certainty. 

Therefore, at the gc a, telegram attec wsalned unroll, the conterc ef the 
deciphered ceaseges was always factual and therefore important. 
22ES22*' E0Baa0ia us ** fcr *"> tab* vlth a persistence ™ich was unigue 
a S7Ct« of cedes vita Citation enciphers using stepl 3 dlgit 

institution tables, e, g, 

0-4 

1 - I 

2 - 6 

3 - c 

k a e 

15da *** 102 " 1 «***ww substitution table, are passible cay hare 
caused Bucharest to conoid this cryptographic ^ secure, even though the 
..option of such a eystea vaz act difficult in and of Itself because in suite 
of She roeaclpharaent an the affieities ,ere preserv e., g., 13316 - S*4S9 - 
50076) aufi a reduction to the basic code aas always passible vltfa eoc.gh traffic 
3ucharest never failed to facilitate a break-in after a charge of code by allow- 
lag the old and new eases to run parallel for a ttes because the acre reaete 
embassies had not yet received the ne* one so that now old a** nev codes sere 
inhered wi*> - , m 0 r by oversight the reenciphar. 

«nt *es forgotten shea a nev code was introduced; or one and the eaae text was 
enelphered in the old and in the nev code. Ho other country ever exposed It* 
cryptographic system with such fatal precision: Not until k 3 /kk did Bucharest 
introduce a new systea: 5-dlgit code reenciphered by infinite additive 
seoue.ee. But even then Bucharest -ade the Estate of permitting multiple use 
of the very long additive sequence (as I recall it far over 5 ,C00 digits), 

5 ; 



o2 ricsiaSj because thera aas bo opportunity of providing all esfeaseiea trtth 
adequate amounts of rsaaciphsiwrat material. And the entire sas uaed 

Si r "'- Val tllt30: * ncar ** TO3 T - il£ ••-« ecspata the differences although 

the difference satalcgue contained M hundred thousand groins. Deriva. 
tion uas asehenical because sab auantitiee of differences could cev.2? have 
ten rortad out V hand and rental crtthEattc. Tils -rcrk, imv, oat si*h 
SC aucc3SS " C3CaKS<9 ^° eoltepoe of Rewania occurred, foiled SO on 1,7 the 
German collapse. The value of decrypted Roumanian xeeaages varied «ith the 
a *3P* s * of seriousness of the Individual eabasaadora. 

She Military Attach? fcystas *as intereatingi a eystea of coupled trona- 
pC3l - lo ° bmts 1 c=a 60 lonaw recall details rev. The transition 

bosse changed daily ard the plain text vas entered in the box cooler: in a 
defiait* order. Tbia eystea brought extreBely tapcrtant information, as, for 
instance, tba ^controllable teee**dc«a cf t2» Roumanian Ar^ becaus. cf 
deficient supply of enaxaitica. enjaipnant, end food. 

SSS" Tba culminating point in bhe analyaia of ftench cryptographic system 
falls la tba last period of peeca, extendi** flora to ,be capitulation of 
3 * rnc *" 3o otb9r »=qpeaa used such a cultituda of cryptographic 

systaas, of ehlch fluently acre than 12 vara in ». eisnlte^ouoly. All 
sy*t*ss vhich could not be ir^diately recognized by eye »ere differentiated 
by indicator groups femagragyen asranaate) which sera introduced at a definite 
position in the encrypted tart. Here belocgad the najority of the plain 
*-dlglt cedes, each of vhicb bad a series of indicator groups. In practical 
mk these vera recognised without difficulty and sere compiled in tables. 
Because of its structure and the poverty of diplomatic language, the solution 
of the *-digit code itself c— ~ - aifflcul* - in any case it sea not 

to be cospered eltd tae soiaaioo 01 tee extensive codes of the Americans and 
English or with the graarcatically difficult cede bocis of the Poles. Theee 
Plain cedes for^d the principal source of intelligence because the French used 
the* without scruple for the transmission of isportant usages vhile they used 
reencipbered codes sore rarely. As long as the French used dincee substitution 
tables for partial reencipberaent of the Migit cedes, solution vas regularly 
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poaeiftLa if thar* was ay~ouav;, ^t^lcl, For tha ucehaaged potions of fcha 
oftaariss reaaciphersd group* Bfifcrdaa so tesosrtafit erttartoa for oolntlca. 
I as thinking tore of the with xaaifold variations, a. g. 

vfcsrs the connected digits ra.-e reeactpherad with 2-digit substitution tables 
whlla these sarksd with .-.a x resaleed uncbacr-sd,. 1, a. , vsre parts of the 
alaeentc cf the ^sic ocda. Vben (during the veff; t:w rscnclpher^ all 

pairs ssrisllj-, it was no 102.59?.- pceslble to S r,t r. solution* nothing absolute 
ccu}(2 ha go.ir.-50 firan the raiati-itiss svan though the ayste* a'; first night 
a^s.-oi-fia to he 2»re primitive 

^23 ^gr m> •••• 

At the acnont I co cot recall acy rtber r jer-cipharsacto . 

Khan, af tar th* cap-tunica cf 3rarce, a osaan- was Bads that i&s Fraseh 
Govern- eot rwreal certain cedes?, these cedes had to bo "depeni -:rt" - here? the 
expression "cede deposs'\ France cade p.Li-.crjt so uas of these errypv^gi-ap.hic 
eysteBB. Franco, yon asset law, was p*rsitta5 frea nsa of tha Colonial eys-fena 
wfcioh tad net teen sol-red by Chi! Apparently It fcrcasalttafl ita aoet lsportao-; 
Governaeat traffic in this. The aiteatt to solve the ajstan hrought no av-ccsec 
AiSO £1^= Gaulle '3 cryptographic syacea could not be solves . 

Even before the miitsry action with France begs*, tha military systeas 
of "roT:ch higher staffs vera eolwd. Tia* «as a fc- or 5-dlgit ocda which wse 
orstaeatically transposed (tahleen cerre). In the cryptcgraca a few chert 
Sasrallel pascals {repetition) ware discovered.. The interval between theae 
parallel passages vao constant and suet therefore correspond to the width of 
the transposition hos as cryptaralytic studies have shove. If I an not 
niatak&n, the keys (Lcasggga - Sob-- - the box itself vare 

taL '- Q fron tJle £ sc» cede book. Bespite all the cunning of this cryptographic 
systea, the occurrence of short parallel passages proved fatal. By the aid of 
these deciphered **essages tabs could be kept on the French Army far back into 
the horse land 0 

Belgiun: 3elgiua used a letter coda (5-letter ?) vhich vas reenciphered by a 
substitution table connected with the date. As long as abundant traffic vas 
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aratSa&la, solution of this syntax waa successful but t no lo ^ :2r :rcoan 
details, ASTtar the c:^ituiation of Selgton only a ; r 3 ^ xbbssqqq asm in so 
* fcai ecarca of infcrsa:icn had little etcnifl.;ar.c^ ; 

^Hz^S- «ea a reeuaipcered Frsenh cede beck. I no lessor rwcsafea? 

details. In B<K38 go years only tec **lg:*o 3 diplcoafcio cipher* Ura solved. 
g&SiSSaS!-" Btrltawlaofl had C-orcan and French code beefca ant also erolojod 
OTT-toepoShlo mchlne aystess (saigas). Tie first too vera solved, if i as QCi 
ffltataSsea, there -;ero several digit substitution tables for reencisherceut In 
S3* at bhe sr-e tifisj these were need to encipher portion; of the interned late 
test of eouai iscgth. I thivi I recall that toss certain dlnoasl vara replaced 
07 « single digit. Our results vera Sanger. 

2g72t: Tory rarely a plain Irene,: coda appeared and this vso solved. 
Italy: For many years Italy osed tha syetsn, 5-digit cods reenciphered by 
3-letter substitution tehle. Seriene nistakss ears sade repeatedly. In these 
eo3*« tie entries vera not distributed at random war the entire rang* of suSee* 
LO 5 but vhele bloc* c? 100 nera blank, i, a., a M cot occur at all in the socio 
*** t25W3rtant *°lvia 3 tht reeacl?a*tt»nt because "taocssible" pairs 
souid bo ellrtoated. Substitution tables once used vere not rarely used agaiil 
years later but to* re-uee vas according to the calendar so that vhen such en 
already solved flatter substation table appeared tha analyst vnsrely had to 
"decipher" the taasseges. If a nee 5-digit code mm Introduced they did act una 

- tables Btoaltaneoualy ca all linka so that the aysteza *aa soon coa- 
■^ aiSe<1J ™ S vas 50 ™> flort0 8 var until Italy - already out ca a feabl* 
It* in a Bilitory vay - introduced system of the Zapara typa with 7,ittoria 
ree^tpheraent vhich Chi did ret succeed in S ol ? ivt S , The main raaaaa vaa tha 
sharp drop la traffic. I cannot give anr x*i * " -waadiag 
tha typo of the raancipbensenti I shou;ld say aaditiTO sequences but I say *e 
in error. I oajr be confusing ihie vith acne other system but I do know that 
Italy even uaed cede groups of discarded codes as additive digits for rssnaljjhar. 



3. K 



presumbly isaant "Batch" or r -Hetherland". translator's notej, 
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2&£=2£« JtoiBfi «te eonrsa cf joara sens 2= different er$pteg*a£iia systaaa 
vers observed cad of fekess BOTrcxiaately 10 plain, non^jhabatld erf non- 
STatejaatic 5-letter cedes of large sise rare Bolted. Solution deseeded entirel 
°* aB0UIrt °- aaiertal. She "PredoBe oeesages", vhlch probably m» 
enciphered with as infinite digit series, we not wcrkei on at all. ajhs 
traffic receipts 1 em extresaly haaTy during the w « But since the really 
lapartaat •sesBes»s trace sent in "Proaeaw", what m got that vas useful, was 
relatively Uttle. When London iapcsed a eeaanaleattona embargo before the 
lanSing of the AlHec, there vas actvally a noticeable falling off in reporting 
frees and to London. But eren fr-sa rssn-ea of the other European dlploaatic 
representatives not a single clue could be obtained as to piece ted tine of 
tn» projected landings, 

S r ft'- 8 -oraordicsry "BrWn" and "Grey" cedes vers solved. As la the 

ease of fetfUiaft, solution Seceded entirely cn She eaoant of traffic vhlch 
cab tines ease in eocraoua guentltles. Both codes wre available in the 
original la 19&3 (T). On the ether hand solution of cryptographic aystous, 
the 9o<08lled AJBC 9 and &5BG ID, canoed considarrbl* difficulty. ?or the 
reenclpheraent of tie one syeten 35 (?) strips *ere used, each hearing a 
different substitution alphabet; initially the sequence of the strips renalnsd 
valid for a considerable tise but later (l$kk t) they vera so frequently 
persated that solution could nc longer be achieved. At the sere tiaa the 
auaber of strips vas considerably increased, If 1 raaeBber rightly.. The 
original solution vas not by analytic Beans. The break-la resulted on the 
basis of the cede booh supplied by 2cne (?) and of tables mde availabls by 
Budapest (?). Dcrn to the battles before Tobrtifc, the reports of the U, s. 

Bllitary Observer in Cairo rare read end vithout doubt the-- — • 

tactical significance for Weld Marshal bdmel because the American reports 
regularly ga-e the BoveaeBt of the English troops. The replacement of the 
system vhich then resulted vas ostensibly due to the fact that sooe one in 
Boas talked about the successful analysis; in any erent, something regarding 
this solution leaked through to unauthorized German officer circles in Italy. 
The fact that later on a solution of the problem could no longer be forced 
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«ati due to the fact that, expressed oalahBaatlcelly, it gaa necessary l?j each 
ease to solve aa equation ecdulo 2b, 

The other cryptographic system cessuted - I think - la the fact that a 
Halted numbs? of successive letters of the lntermedlata text baa to be r55ir-.cc 
by a substitution alphabet accordics to a table. I esk that you regard this 
etateaeot very critically because I say have fallen Into serious error because 
of the {jreat nuifcer of very different eyetees. ?*rkapc, tco, I aa confusing 
thes s fcso sye teas with respect to their use in Cairo and with respect to the 
securing of documents fron Some and sudapost. 

2ffiSS ! CeBKarS tared a plain letter (?) code the solution of which iras easy, 
ts&««a*Bt messages sad Inconsequential content aede it seem unimportant to 
week cn then. 

2££SL J Honregian system Hera worked cu only after the occupation. The 
wcrk set with no success. In approximately four years hardly 200 messages vers 
received 1 . 

Sweden; The very extensive 5-dlglt code caused assy difficulties; after 
receipt of ths ccaplete cede beok frc.a ?.-r.e *i«&o ?) it ??ae clear that the 
difficulties ley in the philological structure of ths cede: simultaneous use 
of Swedish, German, Kronen, ©ad Sogllsh concepts. This had not merely confueec 
the statistical studies so that nothing could be recognized and for a long tiza 
it :o3 bought that some reenoipheraent was used which could not be attacked 
analytically, but greatly hindered ths iingnlstlo solution. Work on this eyatec 
continues for months in a totally false direction! The mixture of language* ve.fi 
Jusi r.f. re« and surprising as the cede groups "repetition of the n tt group" 
erp5an.Es in Snglish systems after the First World Her, groups Which obviously 
could have a thousand different meanings in practice. Thus *hi~ " 
cede was a typical exaosple of ere cleverly constructed, Ths content of the 
few messages received was usually of no moment. 

The bulk of the Svedish Bessases was enciphered by means of Hagelin's 
Egaiik, However the "basket" of this device, i. e., the drum consisting of 
25 (?) bars with the various riders was probably varied from message to message 
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« a* a* am** u*m*» a*** of «m> (eol3 >, ^ a<w , a 

Hra Ssgalla H-ohics (1943$$ t). 

*>- Iftk vie, Gw* coU^,, », t#*Um. , msal? 

M Si™ no data.Ha r^ratas ^ clp^. a, Jc ,^ ( ^ ^ ^ 

erat labia ; 0 tSa original. (ihathar it .,.<_». . 

aaaroa it ax ndjM or cot I eoa no lorgor 

w*U. Eram„ ia ^rt^ 7 «, that a, « lte of 
* * J «** » « . 5-^ (« rttSl £cs 

*° l7ea «»T «w» without taj slgntilsam. 

« an ft* a, wpaurf fsate, of tte Wo «. , 41sW 

" 1V - BB * M «' " iU ■*•*»«*« ««- *ica ^ to „ , 

a TO ,.aa .nn "aMp," „ u ^ 3 . « ^ ^ 

Mfet aaOaa „«, orlslaaUy ^x*^ i7 maltl7e 
.«batimi« taalaa. Th. oc 3ec »M=a va, E ut« tote*-* ; fen ^ „, 
VK " 3JB ^«^ »«» *o taair At flrat olallEr oc ,-, 

InMM, tte aetata af 00l ^ ^ ^^^^ ^ 

!M« ^ c« a^ia =Baa «a a^taS. af ua^ bean ^tate^ 

CW CMe " * U ^ "' l0mtl ° ^ - —Pt teat af th. Hiatal of «. 
Krtanar . ,„o aolaaa. ^ affara^ valuta iafo m «oa. ^ to^ 

= OT t., OT vara paor aaa triad to t m , s=Bli3h ^ en ^ ^ ^ a „ 
rot fall for taace: 

Only a fev vary pttaltlra c^tosraohlc ajataaa. 
oraooa aant fa. ^aa^a, Withla V ^ t,aro vara tto aa atffarant 
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bMflfe me* flKte«l8ttM ^ as iMicsta? in the thiss pesitloa sto 

tc ;.- SgOT ft&OY. 

JStieaai Share sresra cartels^ t»o o*Sptcgrttfalo aystass. Oca of than mm a 
plato eoSa ess van aoired. Heswav, iu yielded oaly ucdaportant afedaiataatlva 
^ :v: ' 3 ' 2 " 0COTrrsd aw»3^. The reaaelpferod ccdo vca wrtart oa far a tftM 
i:: ' 3rj uia **csa3a 3» pafcaatfal »sa cot adequate to pratt of an 

P^teC-S-' 2ss*Bt5.n?.i7 Bulgaria uaad a ayetss cecstottsg of a 5- Slglt aoAa aad 
a mari^nti la vMoh tfca ex^totazt g-rap arcaa ®&*&gh feeaaposittoa of 
tfc* ixasiie ccd* groap, Eaaca, tfiec Seea^tas, the groupa >^ ta be B te2oaa cm* 1 ' 
«etttfU« to a verlabla *, g „ t os t»as 3f \&m*fy3&* Cara ta the t&» 

of cellar** ecus ft** oach ecdea tmsra solr-ad carwctly. Bttlswla also aaa* 
*** **** 80 <**«*M5r * MS* ::,all 7 «H««a*|- to it* 

" M *8a>«r*&4 a eartsta occSi -aVrally ayatsBtstie rtieag-i 

eo -"-it far isataaca fraa: 

I think that eaee the rev eacfcara v.«« alee ehacged fcj a ainiisr fM*». 
ilia tSKJasgwa «vo often reiry laftasatim! 

rapenj tferk was etastea oaly during the nr, la spite of the aosersua 
Slffs^al ayataas -raioh appeared, fear plate cedea tc all wn eol*«d w . Th* 
dlfSisttl** lay prir-riiy la the eot elva.73 aceabigaoaa twaoortptlco of Japaaaaa 
into Latla acrtpt. A twmapcaltioa box rlth blacJc c^i« in tha top oacael«^ 
aer* uo^. tfa bn 3 aa jot co a^azlaaoa la tola ftaM, and nca* rtta rho atractar., 
of tba tal^p^c laagaaga. In working on thia ayataa atteoaaafal ua-> vaa asd 9 
of ±, ^Igrtan wareb SaTtca" (ai^a^ao^raet) watlocad in aaotaer placed 
Oaca tvo vertical eolaaca vith * Dazlnca of natural digrapha had been fourd, 
larihar aolation ran along aa a rule vithcut difficulty. So other country had 
•to send aa oany aaamgaa roguoating checks and repetitions: Seme 12 different 



h. In oocoad of thia aeries. DF-187A. 



— o 1L v> K. ET l — - 



TOP SEGRr&T 




vs. ■;-icr?cphio systews tiers ohservs<* r bat J. 33 isollncti to thins tbat tie h&J 
Bo* yet aueiseaded in rsfte&tiSlSg all klsdred arterial. Jl-s-ag*? usually 
wit sou* interest. 

CMia: China was first SBBitaead dislsg its rear end showed or^e 10 Aifffercai 
cryptographic oystcas, of which three jrtaitiTe ocss :?ars solves. Contents 
Wit! -out value, 

^£1^£S ; Aboa*. the Diddle of i?'? 2 * ?. took ever frca the Arsy the work oa 
osauxvaa agent eyateaa of ffraueej, Poland, the Baltema, end Italy. *lost of 
these eyataxs, all told sobs CO were knorm, vera based oa the use of bcol» or 
indicator words - key words, Ejay used doable transposition, transposed 
"Caesars" , and also Caesars with one-tine Er-iiiir**, I knew off only dm cace ii; 
wbloh solution of tins sysvoa "no successful without ths previous arrest of the 
agent (Poland 5 « Clarification of the radio aefcserka alcue aeaat little fee? 
the cryrtaralytic section, o£ ths Dettrarlffi were intprcoptsd; their 

euwber ran into the hundreds by etc end of the kjst. But in 99 percent of nil 
oases analysis com too late, vastly efts? Km arrest aw» aftar tha sapwrfl cf 
the key, if the net net norMncs ta opereta «.rith the sow known >«y after 
'cue arreet was cede. Sines I hsd cothing to do -nth the agsnts ir?c;ilZ and 
rs7?;r csae into contac t with cr» f the 33 f S^^rhejttsd i?r. . . - S*cvrity- Service) 
sod the Connteriuteliassrss wlr/3bv; 513 ss they sew fli;. they worked ffrea a 
point or view which I could act share: generally they stepped is &cd o&ds 
arrests and, as a rule : canned the net to fiisGppanrj I vas interested in 
iroaitca?i»a the net, especially -rhen I was able to ? 3olre the Bsssagea. tfithovt 
ever having been able to get hold of precise dcctsasntatlon of the results of 
ouch arrests it is still belief that tha agent oysters fulfilled '-heir 
purpose admirably and that the service vas rsry veil organised. 




0 . affgraiaal of Succe sses 
SSS Sfft ggyfeffig&g : 353 iad*n*Bdsct discipline actual cryptGiialjsi.'j; 
ttcuefe cue of lifted application, bad repeatedly yielded goer 1 results {*. g., 
?oliab system,, Soiaaaatau additive, fesaiiesa transposition), tat it bad to*. 

atSalcsa lts ft* 1 cej.aal^. Tbi* worte, eren oere than practical dociphar. 
oars, 3all3 for an wwireaasmt free frcn disturbance (bcaUog attache, 
Boasted furniture, flirt, cola, end eteonle ondernouriabsenti). Since oryptolog 
la vie* of tbe scaotlnsa notably hie* atatua of eryptology la foreign comrtriea 
hex really baoese a science, sae bad to aeoapt tbe fact tbat the fruits of 
cryptanalyais could only ripen slowly. £fca war period witb Ito inoreaains 
dearth of personnel sad caterlal and wita the tardealng of the Individual to 
the ltalt cf Ma endurance «■ not favoreblo. for such a davelepsant. 

D< Ccr.clusico 

Thus 0Ef/3bi observed during the ear end doaa oo ald-March tba 
encrypted telesrsss of sera -0 different ooaairiea. "a tba beat parlcd (devn 
to the capitulation of France) tfce section put ant as high aa 3,C00 asvsags* 
a south. Or. tba average thres tines r.o aany vara deciphered but not teaasiafted, 
0-rv a period of five years sy ^t received approximately 370,000 eoerypt«d 
aesaaesa a year. The tcazlon* nncSfar of eoUaagaea, iselKdiag all auxiliary 
trailers, ejaounted to £=0 peracna (la tba year 19*2). Proa then on tba ■**» 
«ck steadily because -era and acre uea fit; for silitarj duty «ere withteeeu 
^ beCaUS * *• ******* «f Labor Office is Berlin refused to aaaiga to 
Chi tba ma*? cf replenesenta requested. At tba tine of tba capitulation I 
may still hava bad 120 persons. 

There are perhaps tbraa things vith ahich the bead of CSf oan ba rsprnnched 
• . Vitb not bavins correctly evaluated tbe results of oryptaaalysia 

or perhaps, aranting correct valuation, with not having properly utilised 

then a results, 

2, With having refused aa unnecessary tbe deciabermat of e S oacartc and 
corjEeroiai casoagea, 

3. With not baring kept W unit capable of performing ita duties by trana- 
f earing it promptly to Mb bcab-prcof area. 




I zn of tSra 'jplaioc t&at -iwss tiaras adetsksa t»ea?o tba fi?.r3ct e©i»9$eafi<<e 
ex? few fate:?al dcr&lza c:? Vae i"--^^v^ end of tho uccvitical, Brroa«JCitfj 
% ta a i&recle. Hoswer, Ged caaact fca bribed and is tfcarafera always 
ca Via side cf t&a atroag aat battalions. 

tfilbela 33KES! 13.9.19W 



TOP SECRET 



& t 5213S}}Z. 



Eof iultloa of Concents end Sxpiageticaa 

£7 twalysla of a esyptcgraphia system (Cte^i^cfcrlftar^fese) we snflar- 
stcsa recognition of tho roeaci^^ei-ssetrfc ftfeherschlttssselung) acd of the, 
basic syaten (^Etve?£&ren) of a aeoret tart ( ffehetate st) fees criteria 
of ita statistical study. Cradely expressed, the cryptanalytic solution of 
a aeuret text ie the opposite of solution fcy guessing. 

Cryptographic syetea (the actual "toy" (Schlueaael)) la bhe lew (C-ssetz) 
for,' the conversion of a plain tart (gggfrgfe) into n aaarat test ( Qctoiatext ). 
Saucfi, secret tact. (Geh aicftost ) , secret sassaga ( Geheiaaprcch ) . cryptogram 
fS3E*2SSa^ •wwyptee snaaega {OMffre-spnich) . crypt asessasa ( Chisprach ). 
racryptea telegren (CMffrentolegrasg ). isrypt telegram { CMtoiegqEaj . cipher 
test (Ohiffrat) , keyed nessage (Sghlrggselsprach ) . toyed test (Schlaeaaeltext ) . 
enciphered fBessage ( versif f crtar Sra-aoa) ar-» synoroncotae concepts without con- 
aistint consideration of the outserfi fora of what is sritten. 

To encrypt, encipher, key ( vergiffarn , chlffrleren , schluosools) la to 
convert accoroing to the given Is?, i. e., according to the given cryptographic 
ayat'sa, a plain text into a secret test. 

-° decrypt, decipher Cectachluscseln , dechlffrieren) signifies the reverse 
operation, it lsada to the deciphered cessaga CSechiffrat) . plain test 

(iQartext), decrypted aessaga ?^S^SS£SS^1£^ES£2:^ ^-asws 
(Telegram), etc. 

To cryptanalyze, (entslffc-yn, decryption) signifies, ia contrast to -the 
above, the conversion of a cecret text into Its plain text without authorized 
knowledge of the toy. 

-. -„ --, , »«mlt of a regular deviation frca the 

fores of expreeslon of the written laoguage. The task of the cryptanalytic 
sectica is to find this law. 

A secret text, colloquially also a cryptographic systea, is "derived" 
{"ebgeleitet") fro* the plain text according to the law, i„ e., the cipher rule 
(Schluesaelrssel). A cryptographic systen is "solved" ("geloes*"), likewise an 

eacryptea telegraa. etc. 
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****** HZstasa CGr^7£r?ahretO aav roTptagrapMc systaas vhich era 
oarivad by aaare of only ens operation. 

B3enolpfcei'«a syafcsta foebersohlasaeelts Terfahroc) strictly speaking 
orypt03raphie syata-a derived V resseiphoaraeatj era encrypted tares 
'.SSigfeaf ) v5lle "^ ore derives by seara of tats or aore operations, 

Ccribicad systaas tecnfeinlerte 7grgebren )ero Kyptographic syatezis which 
8T© derived by the SWCC933ivs see of tvo or core basic cyatezs. 

Independent reeceipfcsrsenta ( galbstaoat? Lga Usbarcohlsaoaelnngen) itr/olva 
operational oae of sycfcols which thssselwes ar« sot cryptographic system at 
all, 

(I) Eeenciphernen;:3 by digit aeojaenoas (Zahlenrelhea) ; 



e. g. Plain tests 



5-digi'c coda asj 
"interred lata csri" 

Addltire 



Answer io 

42577 
42912 



your 
telagrazs 



S90SI 
05967 



mother 
39715 



Secret test 84589 24988 

(S) Reenolpheraeiri: by substitution table: 

Substitution Sable 

0- 3 5-2 

1- 6 6-5 

2- 0 7.3 

3- 1 8-4 

g. Plain text: Answer to 



7=001 



your 
telegrea 



nmfiter 



neon 



Secrat teit according 
to the table 



90588 



£9021 



07306 



46396 



95175 
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Sis:® of a C gjaSacg ainaa Ccdea) is tbs cuserlcal area occupied 07 i-;., 
A ecis 0000-9999 using 2*. digit ercv.ps has tbs sls«r 10^ or IC,CCC. 

A codo is !3i2sa-«oit {^cijoelstollig) If Its coSe jproups differ in leBSfca,, 
consisting fee instance, of 3= cr letter orcupa. 

S arret ele-^ent (Gohalr.els?.egt ) is ths cc-ty&nsnt In tlia encrypted test eor~ 

respond to the plain-tort concept, e. 3... in a plain cc3e tort, the "cede 

group" , 

3r*afc-ia { Sinbrvch ) . To schist- 3 a breaft-in into a cryptographic system 
ia to e'etain a racosnlticn of Ita resu.'.srity^ sotJarally associated with the 
initial steps of solution, 

Every crypt Jsrapnic sys'icn has its natural da~r«e of security, its 
natural resistance to analysis, cr its natural lisit of reaistasce, If in ths 
vsp of tha systma t*» Unit of its rselstanca is zsachsti or even szcGcds.],, then 
the system hsccv.es capable cf eolation. 

It, is the task of crytir;.:?.:-.73i3 to csvelop eetheda vhich '.'ill permit 
^--:c-o^r.i tion of thi3 limit value as enrly as possible wlHh a -dnisnin nanbar cf 
resales „ 

Crj^tcprnphy is tha science cf encrypting, enciphering, srccSlne, (vsr- 
stffgra, achlueasela , chiffr i grsn ) decrypting, deciphering (doclvlftrieren,, 
etrtechlueaseln) , etc. Cryptelcgy is tha science of the solution of a crypto- 
^aphic cysten :rtthcut (authorize) possession cf the hay. 
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